Linux

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4798-1 Related CVEs: CVE-2016-8568 CVE-2016-8569 Upstream summary: It was discovered that libgit2 mishandled certain malformed git objects. A remote attacker could use this vulnerability to cause a denial of service. […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3195-1 Related CVEs: CVE-2017-5936 https://launchpad.net/bugs/1656847 Upstream summary: James Page discovered that Nova-LXD incorrectly set up virtual network devices when creating LXD instances. This could result in an unintended firewall configuration. […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 March 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5436-1 Related CVEs: CVE-2016-7949 CVE-2016-7950 Upstream summary: Tobias Stoeckmann discovered that libXrender incorrectly handled certain responses. An attacker could possibly use this issue to cause a denial of service, or […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3427-1 Related CVEs: CVE-2017-14482 Upstream summary: Charles A. Roelli discovered that Emacs incorrectly handled certain files. If a user were tricked into opening a specially crafted file (e.g., email messages […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3375-1 Related CVEs: CVE-2016-10124 CVE-2017-5985 CVE-2016-8649 https://launchpad.net/bugs/1501491 https://launchpad.net/bugs/1501310 CVE-2015-1335 CVE-2015-1331 CVE-2015-1334 Upstream summary: It was discovered that LXC incorrectly handled the TIOCSTI ioctl. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3784-1 Related CVEs: https://launchpad.net/bugs/1788929 https://launchpad.net/bugs/1794848 CVE-2017-6507 CVE-2014-1424 Upstream summary: As a security improvement, this update adjusts the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally adjust the private-files, […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3400-1 Related CVEs: CVE-2017-7555 Upstream summary: It was discovered that Augeas incorrectly handled certain strings. An attacker could use this issue to cause Augeas to crash, leading to a denial […]